IN THE CLAIMS : 

Please amend claims 1-10, 12-13, 22-43, 46, and 48, cancel claims 11, 14-21, 44- 
45, and 47, and add claims 49-55 as follows. 

1. (Currently Amended) A n apparatus security — sefver — fer — use — in — a 
tel e communications n e twork, th e s e curity s e rv e r configured to comprising : 

a receiver configured to receive a message via a secure interface or directly from 
outside a telecommunications network ; 

a determiner configured to determine whether the message has been through a 
security check by determining whether or not the message has been received via the 
secure interface ; and 

a forwarder configured to forward the message within the telecommunications 
network regardless of the result of the determination-; bu^and 

a modifier configured to modify the message so as to indicate that the message has 
not been through a security check if the result of the determination is that the message has 
not been through a security chec k modify the messag e so as to indicate that th e message 
has not b ee n through a s e curity check . 

2. (Currently Amended) A n apparatus s ecurity s e rver according to claim 1, 
wherein the security s e rve r receiver is configured to receive a message from outside the 
telecommunications network. 



3. (Currently Amended) A n apparatus s e curity serv e r according to claim 1, 
wh e r e in th e s e curity s e rver further comprising: 

a modifier is-configured to modify the message so as to indicate that the message 
has not been through a security check by adding a parameter to the message that indicates 
that the message has not been through a security check. 

4. (Currently Amended) An apparatus security server according to claim 3, 
wherein the s ecurity s e rv e r receiver is configured to receive a message that includes an 
identity header and is further configured to add the parameter to the identity header of the 
message. 

5. (Currently Amended) An a pparatus security s e rver according to claim 4, 
wherein the message comprises a session initiation protocol message. 

6. (Currently Amended) A n apparatus s e curity server according to claim 4, 
wherein the identity header comprises a P-Asserted-Identity. 

7. (Currently Amended) An apparatus security s erver according to claim 1, 
further comprising: 

a modifier configured to modify the message so as to indicate that the message has 
not been through a security check by removing at least part of the identity header, 
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wherein the receiver is configured to receive a message that includes an identity 
heade r and i s furth e r configur e d to modify th e m e ssag e so as to indicate that th e message 
has not been through a s ecurity check by removing at least part of th e identity header . 

8. (Currently Amended) A n apparatus s e curity s e rver according to claim 7, 
wherein the security s erve r fiirther comprising: 

a detector is-configured to detect whether the identity header is of a particular type 
and if so to remove at least part of the header. 

9. (Currently Amended) An apparatus security server according to claim 7, 
wherein the message comprises a session initiation protocol message. 

10. (Currently Amended) An apparatus security server according to claim 8, 
wherein the security serve r detector is configured to detect whether the identity header 
comprises a P-Asserted-Identity type. 

1 1 . (Canceled) 

12. (Currently Amended) An a pparatus s e curity s e rv e r according to claim -141, 
wherein the secure interface means-is a Za interface. 



13. (Currently Amended) An a pparatus s e curity serv e r according to claim 1, 
wherein the s e curity serv e r apparatus comprises an interrogating call session control 
function. 



14-21. (Canceled) 

22. (Currently Amended) A system telecommunications network comprising: 

a security server; and 

a network processing element, 

the security server being configured to 

receive a message via a secure interface or directly from outside the 
systems 

determine whether the message has been through a security chec k by 
determining whether or not the message has been received via the secure 
interface s 

if the result of the determination is that the message has not been through a 
security check modify the message so as to indicate that the message has not been 
through a security checkr^and 

forward the message to the network processing element regardless of the 
result of the determination. 



23. (Currently Amended) A system t e l e communication s n e twork according to 
claim 22, wherein the security server is configured to receive a message from outside the 
telecommunication s network system . 



24. (Currently Amended) A system t e l e communications network according to 
claim 22, wherein the network processing element is configured to: 

receive a message forwarded by the security server; and 

determine whether the message has been modified so as to indicate that it has not 
been through a security check, and, if it has been so modified, perform one or more 
security checks in respect of the message. 

25. (Currently Amended) A method of p e rforming a security ch e ck on a 
m ess age in a telecommunications network, the method comprising: 

receiving a message that has not been through a security check via a secure 
interface or directly from outside a telecommunications network ; 

determining that the message has not been through a security chec k by 
determining that it has not been received via the secure interface : 

modifying the message so as to indicate that the message has not been through a 
security check; and 

forwarding the message within the telecommunications network. 



26. (Currently Amended) An apparatus s ecurity — seever — for — i*se — m — a 
t e l e communications n e twork, th e s e curity s e rver configur e d to comprising : 

a receiver configured to receive a message via a secure interface or directly from 
outside a telecommunications network ; 

a determiner configured to determine whether the message has been through a 
security check by determining whether or not the message has been received via the 
secure interface ; and 

a forwarder configured to forward the message within the communications 
network regardless of the result of the determination but, if the result of the determination 
is that the message has not been through a security check, forward the message in a 
manner that indicates that the message has not been through a security check. 

27. (Currently Amended) A n apparatus security server according to claim 26, 
wherein the se curity server receiver is configured to receive the message from outside the 
telecommunications network. 

28. (Currently Amended) A n apparatus security s erver according to claim 26, 
wherein the se curity serv e r forwarder is configured to forward the message without 
security, if it is determined that the message has not been through a security check. 
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29. (Currently Amended) An a pparatus s e curity s e rv e r according to claim 26, 
wherein the s e curity serve r forwarder is configured to forward the message with security, 
if it is determined that the message has been through a security check. 

30. (Currently Amended) An a pparatus security s e rv e r according to claim 28, 
wherein the security comprises a Zb interface. 

3 1 . (Currently Amended) A n apparatus s e curity s e rver according to claim 26, 
wherein the message comprises a session initiation protocol message. 

32. (Currently Amended) A security s e rver apparatus according to claim 26, 
wherein the security s e rv e r apparatus comprises an interrogating call session control 
function. 

33. (Currently Amended) A t e lecommunications network system comprising: 
a security server; and 

a network processing element, 

the security server being configured to 

receive a message via a secure interface or directly from outside the 
systems 
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determine whether the message has been through a security check by 
determining whether or not the message has been received via the secure interface s 
i_and 

forward the message to the network processing element regardless of the 
result of the determination, but, if the result of the determination is that the 
message has not been through a security check, forward the message in a manner 
that indicates that the message has not been through a security check. 

34. (Currently Amended) A tel e communications n e twork system according to 
claim 33, wherein the security server is configured to receive a message from outside the 
telecommunication s network system . 

35. (Currently Amended) The telecommunications network system according to 
claim 33, further comprising: 

an internal security system, 

wherein the security server is configured to forward the message via the internal 
security system, if it is determined that the message, has been through a security check, 
and 

wherein the security system is configured to not forward the message via the 
internal security system, if it is determined that the message has not been through a 
security check. 
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36. (Currently Amended) A t e l e communications n e twork system according to 
claim 35, wherein the internal security system comprises a universal mobile 
telecommunications system specified security system. 

37. (Currently Amended) A telecommunications network system according to 
claim 35, wherein the internal security system comprises a Zb interface. 

38. (Currently Amended) A t e l e communications n e twork system according to 
claim 33, wherein the message comprises a session initiation protocol message. 

39. (Currently Amended) A t e l e communications n e twork system according to 
claim 33, wherein the security server is configured to determine whether a message has 
been through a security check by determining whether or not the message has been 
received via a secure means. 

40. (Currently Amended) A telecommunications network system according to 
claim 39, wherein the secure means comprises a universal mobile telecommunications 
system standard security means. 
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41. (Currently Amended) A t e lecommunications n e twork svstem according to 
claim 39, wherein the secure means comprises a Za interface. 

42. (Currently Amended) A telecommunications network svstem according to 
claim 33, wherein the security server comprises an interrogating call session control 
function. 

43. (Currently Amended) A method of p e rforming a s e curity check on a 
m e ssag e in a tel e communications n e twork, the m e thod comprising; 

receiving a message that has not been through a security check via a secure 
interface or directly from outside a telecommunications network ; 

determining that the message has not been through a security chec k by 
determining that the message has not been received via the secure interface ; and 

forwarding the message within the communications network in a manner that 
indicates that the message has not been through a security check. 

44-45. (Canceled). 

46. (Currently Amended) An apparatus security — s e rv e r — ier — use — in — a 
t e l e communications n e twork, th e se curity s e rv e r comprising: 
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receiving means for receiving a message via a secure interface or directly from 
outside a telecommunications network ; 

determining means for determining whether the message has been through a 
security chec k by determining whether or not the message has been received via the 
secure interface ; 

modifying means for, if the message is determined not to have been through a 
security check, modifying the message to indicate that it has not been through a security 
check; and 

forwarding means for forwarding the message within the telecommunications 
network regardless of whether the message has been through a security check. 

Claim 47. (Canceled) 

48. (Currently Amended) An apparatus security — server for use — in— a 
t e lecommunications n e twork, th e s e curity s e rv e r comprising: 

receiving means for receiving a messafie via a secure interface or directly from 
outside a telecommunications network ; 

determining means for determining whether the message has been through a 
security chec k by determining whether or not the message has been received via the 
secure interface ; and 
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forwarding means for forwarding the message within the communications network 
regardless of the result of the determination but, if the result of the determination is that 
the message has not been through a security check, forwarding the message in a manner 
that indicates that the message has not been through a security check. 

49. (New) A system according to claim 22, wherein the secure interface is a Za 
interface. 

50. (New) A method according to claim 25, wherein the secure interface is a Za 
interface. 

51. (New) An apparatus according to claim 26, wherein the secure interface is a 
Za interface 

52. (New ) A system according to claim 33, wherein the secure interface is a Za 
interface. 

53. (New) A method according to claim 43, wherein the secure interface is a Za 
interface. 



- 13- 



54. (New) An apparatus according to claim 46, wherein the secure interface is a 
Za interface. 



55. (New) An apparatus according to claim 48, wherein the secure interface is a 
Za interface. 
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